YanTasks.

Last updated September 14, 2026

The short version

YanTasks stores your tasks, tracked work, rotation history, and account. There is no analytics, no advertising or cross-site tracking, and nothing is sold or handed to anyone else. You can delete your account, and everything in it, from inside the app at any time.

Without an account

If you never sign in, nothing leaves your device. Tasks live in your browser's local storage, or in the app's own storage on iOS, and are never sent to the server. Clearing your browser data, or deleting the app, erases them.

With an account

Signing in stores the following on the server:

• Your username, as you typed it and in lowercase, so names can be compared without case getting in the way.
• A hash of your password — scrypt, with a random salt. The password itself is never written down and cannot be recovered from the hash.
• Your tasks: title, description, due date, and whether each is done. Whatever you type into a task is stored verbatim, so treat the description field the way you would any note you keep online.
• Your timer and preferences: daily work totals, per-task time, long-term rotation service, turn progress, the daily recommendation, active timer timestamps, the timer’s time zone, a random app-generated controller ID, and bedtime. Legacy rest counters, day settings, schedules and recommendations may remain from older versions.
• Session tokens, stored only as a SHA-256 digest, so a copy of the database cannot be replayed as a live login.

No email address, phone number, real name, contacts, location, photos, or hardware identifiers are collected. A random app-generated ID identifies which client controls timer alerts. Notification permission is optional. Notifications are scheduled locally on your device; no push token is collected.

Sign-in throttling

To limit password guessing, failed sign-in and sign-up attempts are counted against the requesting IP address for fifteen minutes. Those counters are deleted automatically once the window passes.

Where it is kept

The app runs on Vercel and stores data in a Neon Postgres database. Both act as processors for this app and nothing is shared with them beyond what is needed to run it. All traffic is over HTTPS.

Deleting your account

In the iOS app, tap your username, then Delete account. On the web, use Delete account beside your username. Deletion is immediate and permanent: the account row and every task, preference, tracked time, legacy schedule and session belonging to it are removed from the database. There is no soft-delete, no archive, and no way to restore it afterwards.

Children

YanTasks is a general-audience task manager and is not directed at children under 13.

Changes and contact

If this policy changes, the date at the top changes with it. Questions, or a request to delete data you can no longer reach: ethanxucoder@gmail.com.